2016 CVE Vulnerabilities
10,647 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-7431 | — | — | 8.6% | Jan 13, 2017 | NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp o... |
| CVE-2016-7429 | — | — | 7.4% | Jan 13, 2017 | NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remo... |
| CVE-2016-7428 | — | — | 3.9% | Jan 13, 2017 | ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via the ... |
| CVE-2016-7427 | — | — | 3.9% | Jan 13, 2017 | The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a deni... |
| CVE-2016-7426 | HIGH | 7.5 | 12.4% | Jan 13, 2017 | NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is... |
| CVE-2016-6887 | — | — | 1.1% | Jan 13, 2017 | The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might a... |
| CVE-2016-6886 | — | — | 1.7% | Jan 13, 2017 | The pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid memory... |
| CVE-2016-6885 | — | — | 1.3% | Jan 13, 2017 | The pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid free a... |
| CVE-2016-2090 | CRITICAL | 9.8 | 3.2% | Jan 13, 2017 | Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via ... |
| CVE-2016-9882 | HIGH | 7.5 | 1.7% | Jan 13, 2017 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to... |
| CVE-2016-3130 | — | — | 2.1% | Jan 13, 2017 | An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 thro... |
| CVE-2016-3128 | — | — | 1.9% | Jan 13, 2017 | A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to ... |
| CVE-2016-10141 | CRITICAL | 9.8 | 3.6% | Jan 13, 2017 | An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before... |
| CVE-2016-10140 | — | — | 6.7% | Jan 13, 2017 | Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled wi... |
| CVE-2016-10139 | — | — | 0.3% | Jan 13, 2017 | An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The two package names involved in the exfiltr... |
| CVE-2016-10138 | — | — | 0.4% | Jan 13, 2017 | An issue was discovered on BLU Advance 5.0 and BLU R1 HD devices with Shanghai Adups software. The com.adups.fota.sysope... |
| CVE-2016-10137 | — | — | 0.3% | Jan 13, 2017 | An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sys... |
| CVE-2016-10136 | — | — | 0.4% | Jan 13, 2017 | An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sys... |
| CVE-2016-10135 | — | — | 0.9% | Jan 13, 2017 | An issue was discovered on LG devices using the MTK chipset with L(5.0/5.1), M(6.0/6.0.1), and N(7.0) software, and RCA ... |
| CVE-2016-9299 | — | — | 97.7% | Jan 12, 2017 | The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a... |
| CVE-2016-6492 | — | — | 1.1% | Jan 12, 2017 | The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges... |
| CVE-2016-5737 | — | — | 1.4% | Jan 12, 2017 | The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a s... |
| CVE-2016-5715 | — | — | 1.4% | Jan 12, 2017 | Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attacker... |
| CVE-2016-3152 | — | — | 2.8% | Jan 12, 2017 | Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downl... |
| CVE-2016-3151 | — | — | 4.3% | Jan 12, 2017 | Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now